Privacy Policy & International Data Protection Compliance

At molebazaar.com, we are committed to safeguarding the privacy and security of our users’ personal data. This Privacy Policy outlines the type of personal information we collect, how we use it, and how we protect it in compliance with both the Turkish Personal Data Protection Law No. 6698 (KVKK) and internationally recognized regulations—such as the General Data Protection Regulation (GDPR) in the European Economic Area (EEA)—as well as other local data protection laws in relevant jurisdictions.

1. Scope & Applicability

This policy applies to personal data collected from all users, regardless of their location. We strive to meet the highest standards of privacy and data protection in every region we operate in.

2. Collected Data & Purpose of Processing

2.1 Personal Information

• Examples: Name, surname, email address, phone number, etc.
• Usage:
  1. Account Creation & Management – to facilitate user registration and maintain your account.
  2. Customer Support – to respond to your inquiries, provide technical assistance, and improve our services.
  3. Marketing Activities – if you have provided consent, we may send promotional emails or offers. You can withdraw this consent at any time.

2.2 Order & Transaction Information

• Examples: Delivery address, billing details, payment information, etc.
• Usage:
  1. Order Fulfillment – to process payments, arrange shipping, and confirm product delivery.
  2. Transaction Records – to comply with legal requirements related to financial transactions and ensure accurate record-keeping.

2.3 Automatically Collected Data

• Examples: IP address, browser type, operating system, and browsing behavior (via cookies and similar technologies).
• Usage:
  1. Website Optimization – to improve website functionality, user experience, and system security.
  2. Analytics – to better understand how visitors use our site, allowing us to refine our content and marketing strategies.

3. Legal Basis for Processing

Depending on your jurisdiction, we may process your personal data on different legal grounds:

• Performance of Contract: For instance, when fulfilling your product orders or providing a requested service.
• Legitimate Interests: When necessary for analytics, fraud prevention, and business operations, provided that these interests do not override your fundamental rights.
• Consent: In scenarios such as sending direct marketing communications or certain types of cookies.
• Legal Obligations: To meet financial, tax, or other regulatory requirements.

4. Data Sharing & International Transfers

4.1 Third-Party Service Providers

We share the minimum necessary information with trusted third parties (e.g., shipping companies, payment processors, data analytics tools) to:

• Complete transactions and deliver products.
• Provide a better user experience (e.g., website performance, customer support services).

4.2 Legal Disclosures

In compliance with applicable law, we may disclose your data to:

• Regulatory authorities or government bodies, if required by legal or court orders.
• Law enforcement agencies, if necessary to protect our rights or investigate unlawful activities.

4.3 Cross-Border Data Transfers

When transferring data internationally (for instance, to servers or service providers in other countries), we ensure safeguards such as:

• Adequacy Decisions by the European Commission (for EEA residents).
• Standard Contractual Clauses (SCCs) or other legally recognized mechanisms.
• Additional Technical & Organizational Measures to maintain data confidentiality and integrity.

5. Data Retention Period

• Order & Transaction Records: Retained as long as necessary to fulfill orders and comply with legal requirements (e.g., tax or accounting laws).
• Marketing Consent: If you have provided consent for marketing communications, we will process your data until you withdraw this consent.
• Other Data: Retention periods may vary based on specific legal or contractual obligations in different jurisdictions.

6. User Rights & Choices

Depending on your location (e.g., under KVKK in Turkey, GDPR in the EEA, or other relevant privacy laws), you may have the following rights:

1. Right of Access: Obtain confirmation of whether or not your personal data is being processed and request a copy.
2. Right to Rectification: Request correction of any incomplete or inaccurate personal data.
3. Right to Erasure (Right to be Forgotten): Ask us to delete your personal data under certain conditions (e.g., when it is no longer needed).
4. Right to Restriction of Processing: In certain circumstances, request that the processing of your personal data be limited.
5. Right to Data Portability: Receive your personal data in a structured, commonly used, machine-readable format and/or request its transfer to another controller.
6. Right to Object: Object to processing based on legitimate interests or direct marketing.
7. Right to Withdraw Consent: If processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us through our Contact Us page or the email address provided below. We may require additional information to verify your identity.

7. Data Security Measures

We take various technical and organizational steps to protect your data, including:

• Encryption (SSL/TLS): Secure transmission of sensitive information, such as payment details.
• Access Controls: Strict authorization procedures for employees and service providers who handle personal data.
• Regular Audits & Updates: Ongoing security audits, software updates, and risk assessments.

8. Cookies & Similar Technologies

We use cookies, web beacons, and similar tracking technologies to:

• Enhance user experience, remembering your preferences and login sessions.
• Conduct performance analytics and provide targeted marketing (with your consent where required).
• You may manage or disable cookies via your browser settings, but note that doing so may affect certain functionalities of our website.

9. Changes to This Policy

We may periodically update this Privacy Policy to reflect changes in legal or regulatory requirements, operational practices, or new service offerings. Any significant modifications will be announced on our website, and the updated policy will be effective upon posting.

10. Contact Us

If you have any questions, concerns, or requests about this Privacy Policy or our data practices, please contact us using one of the following methods:

• Website Form: Visit our Contact Us page and submit a request.
• Email: info@molebazaar.com
• Mailing Address: [Your Company Address]
• Phone: +[Your Country Code] (___) ___ __ __

We will do our best to respond to your inquiry within a reasonable timeframe and in accordance with applicable laws.